Halon

Halon builds the mail transfer agent (MTA) and security layer that other companies build their email infrastructure on top of, rather than selling directly to end-user inboxes. Its platform handles inbound and outbound mail filtering, anti-spam and anti-phishing detection, DMARC/DKIM/SPF enforcement, and traffic-shaping for large-scale, high-volume email operations — the kind of infrastructure hosting providers, communication service providers, and regulated enterprises need when they run their own mail flow instead of outsourcing it entirely to a hyperscaler mailbox provider.

Headquartered in Gothenburg, Sweden, with a US sales presence in San Francisco, Halon has built its business as a scriptable, high-performance alternative to legacy or fully-managed mail platforms for organizations that need custom mail-flow logic at scale. In November 2024, Finnish growth-equity firm Intera Partners acquired Halon; existing shareholders reinvested alongside the deal rather than fully exiting, and Halon has continued operating and acquiring under its own name and leadership since — including its own subsequent acquisition of German email-security specialist eleven Cyber Security to add threat-intelligence capability.

Halon occupies an unglamorous but structurally important part of the email security stack: it is infrastructure that other vendors and enterprises build on, which makes its wins less visible than a consumer-facing anti-phishing brand but arguably stickier, since replacing an MTA is a bigger operational lift than swapping a security gateway.